JWT: RFC 7519; compact signed JWTs use Base64URL through JWS. Security guidance is
in RFC 8725 / BCP 225 — RFC 7519 and RFC 8725.
JWS / JWE: RFC 7515 and RFC 7516 define the compact signing and encryption
structures used by JWT — RFC 7515, RFC 7516.
Internet timestamps: RFC 3339 defines a profile of ISO 8601 used for Internet
date/time strings — RFC 3339.
Unix / POSIX epoch: POSIX defines the Epoch as 1970-01-01 00:00:00 UTC and “seconds
since the Epoch”; ECMAScript Date uses millisecond time values with the same epoch — POSIX.1-2024 and ECMA-262 Date.